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REMARKS 

I. INTRODUCTION 

In response to the Office Action dated March 22, 2004, no claims have been amended. 
Claims 1-17 remain in the application. 

IL CLAIM AMENDMENTS 

Applicants* attorney has made amendments to the claims as indicated above. These 
amendments were made solely for the purpose of clarifying the language of the claims, and were not 
required for purposed of patentability. 

III. STATUS OF CLAIMS 

Claims 1-17 were rejected under 35 U,S,C §l02(e) as being anticipated by Rallis et al., U.S. 
Patent No. 6,425,084 (Rallis). 

IV. STATUS OF AMENDMENTS 

No amendments to the claims have been made subsequent to the final Office Action. 

V. ISSUES PRESENTED FOR REVIEW 

Whether claims 1-17 are patentable under .35 U.S.C § 102(e) over U.S. Patent No. 6,425,084, 
issued to Rallis ct al (hereinafter, "the Rallis reference", or "Rallis'*). 

VI. ARGUMENTS 

A. The Independent Claims Are Patentable Over The Prior Art 
1. The Rallis Reference 

U.S. Patent No. 6,425,084, issued July 23, 2002 to Ralli$ ct aL discloses a notebook security 
system using infrared key. An IR key device carries a first serial number and an encryption key. A 
second serial number corresponds co a device internal to the computer. A mass storage device 
installed in the computer stores a validation record that includes an unencrypted portion and an 
encrypted portion, the unencrypted portion including a copy of the first serial number and the 
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encrypred portion including a copy of said second serial number and a user personal identification 
number. The key device is coupled and interfaced with an infrared port on the computer by the user. 
The first serial number and the encryption key are read from the key device in order to gain 
authorized use of the computer. The key device may be decoupled from the computer after 
authorized use of the computer has been gained^ and during operation of the computer. 

2. Claims 1-17 are Patentable Over the Rallis Reference 

With Respect to Claims 1 and 4 : Claim 1 recites an input device for securing a coken from an 

unauthorized user. The token comprises: 

a user interface for accepting entry of a personal identifier from a user; 
a processor, communicatively eoifpled lo (he user interface; 
a token interface, including: 

a token interface emitter, for producing a signal having information including the personal 
identifier, the token interface emitter communicatively coupled to the processor and further communicatively 
coupled to a token sensor when the token is physically coupled with the token interface; and 

a shield, substantially opaque to the signal, for substantially confining reception of the 
signal to the token sensor. 

Both the First and Final Office Actions assert diat Rallis discloses an input device for 
securing a token from an unauthorised uset: 

"Second, the Rallis reference discloses that the user must enter the pin in order to be 
validated (see col. 1, lines 61-65, coL 2, lines 59-67). Therefore, Rallis does disclose an input 
device for securing a token from an unauthorised user/' 

This is incorrect- Rallis discloses an input device (e.g. keyboard 46). But the purpose of 
Rallis is to secure a computer from unauthorized use. That is accomplished using an input device 
and a token, but that does not mean that the input device secures the token from unauthorized use. 
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With regard to the Final Office Action's further arguments, the Applicants invit 
consideration of FIG. 6E, which is reproduced and described below in modified form. The 
Applicants respectfully submit that of an that is disclosed in the Rallis reference, FIG. 6E comes 
closest to what might rationally be considered to read on claim 1. 




FIG.6E 



Li another alternative, a FS-2/IR ,I Y" connector 17, equipped with an internal automatic switch (not shown), is 
employed ro permit the simultaneous JR connection of an TR key device 21 and a keyboard 46 (or mouse 43) to 
a nocebook computer 10 as shown in FIG. 6E. (col. 6, lines 21-25) 



One might be tempted to regard the circled portion of FIG. 6E to be the "input device" 
recited in r1<nm 1. But if one were to argue that "user interface" reads on the keyboard 46, the 
"processor" reads on a processor inside the "Y" connector 17, and the "token interface emitter" 
reads on the output of the tf Y" connector (on the left margin of the drawn line), the features of 
claim 1 are still not disclosed, because the "token interface emitter" is not coupled to the "token 
sensor" (which would presumably be included in 21). 
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Similarly, if one were to argue that the "token interface emitter" were the interface between 
the T connector 17 and the token 21, the "token interface emitter" would not produce a signal 
having the personal identifier as recited in claim 1 (the PIN is not transmitted to the token 21). 

The Final Office Actio* continues to allege that the PIN is transmitted to the token, relying 
on the following passage: 

Ideally, ibe key devi-oe 2t is of such, sbapit and sbc as to 
be placed on Uic user's key claata, H receives power and 
AO ecmmnnd merges from ibe Doteboolc compiler 10 ftod 
returns response messages, a Aerial winter and an encryp- 
tion fcey. A program minting on the nawboofc compiler 10 
ukv& ilic key device serin) number aqd the encryption key, 
along wilh ri Personal Identification Number (PlM>* in a 
o< uscr^vnlidatfoa procedure lo prevent opcwiioo (i.o. power* 
bp) of ibe note book computer 10 by Jm imaittfaftriSKd tit- 
Nothing in the foregoing teaches transmitting the PIN to the token. On its face, it merely 
says that the program uses a PIN. 

Finally, as the Applicants have pointed out, nothing in RaUis even remotely suggests a 
"shield", and in fact, Rallis teaches away from the use of a "shield". 

The First Office Action relied upon the following passage to allege that a shield was 
disclosed: 



When prooipred by the user-validation program, the user aligns the IR key device 21 -with die IR poirt 16 and 
depresses the switch 25 within the allotted time period (e.g. 30 seconds). The IR key device 21 transmits a 
message that includes the key device serial number and die encryption key using the Ultra Protocol as 
established by the Infrared Data Association (IrDA).(col. 5, lines 51-57) 

And the Final Office Action relied on the following: 

The key device driver 112 provides the application interface to the key device 20. It reads the key device serial 
number and the encryption key, matches the key device serial number to that of the validation record stored on 
the hard disk, and uses the encryption key ro decrypt die encrypted portion of the validation record. (coL 6, 
lines 63-68) 

Of course, none of the foregoing discloses a shield or any analogous structure* The Final 
Office Action appears to argue that the use of an encryption key and a decryption key constitutes a 
"shield": 
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"The Examiner disagrees with the Applicant, because Rallis discloses an encryption key that 
must have a corresponding decryption key in ordex to validate." 

Even if a decryption key and an encryption key could rationally be interpreted as a "shield" 
(and it cannot), it cannot possibly read on the claimed feature "substantially opaque to the signal, for 
substantially confining reception of the signal to the token sensor." 

Accordingly, the Applicants traverse the rejection of claim 1. 

With Respect m Claim 2 : Claim 2 recites that the token interface emitter is communicatively 
decoupled txom the token sensor when the token is not physically coupled to the interface. 
According to the First Office Action, this feature is disclosed as follows: 

A flow diagram of the user-validation procedure is shown in FIG. 3. In Step 1 , the user-validation program 
prompts the user to attach the key device 20 to the notebook computer 10. The program attempts to 
communicate with the key device 20 for a feed delay period. If a key device 20 is not deleted within this 
period, then the program proceeds do Step 1 1 where the computer is automatically powered down. (col. 3, lines 
1^24). 

According to the Final Office Action, this feature is disclosed as follows; 

In an alternative intei&ce, the IR key device 21 is equipped for Infrared (IR) commuiiicfitioiis with a notebook; 
computer 10 via the IR port 16 as shown in FIG. 6A. Ideally, the IR key device 21 is of such shape and size as 
to be placed on the user's key chain. It is self-powered and in its basic configuration, as shown in FIG. 6B, 
includes an IR u-ansmirccx 27 and a momentary transmit switch 25, in addition to a microprocessor and ROM 
(not shown). When prompted by die user-validation program, the user aligns the IR key device 21 with the IR 
port 16 and depresses the switch 25 within the allotted time period (e.g. 30 seconds), (coi 5, lines 44-54) 

The Applicants respectfully disagree- Rallis teaches a key that is commururarhrely coupled to 
die laptop computer, even when the two are not physically coupled. Hence, Rallis not only fails to 
disclose the features of claim 2, it teaches away from these features. 

With Respect to Claim 4 : Claim 4 recites that the shield substantially ckcumscnbcs the 
token interface emitter. This feature is not disclosed in the Rallis reference, and therefore, claim 4 is 
allowable as welL 

Although die Applicants traversed the rejection of claim 4, the Fixiai Office Action does not 
provide further guidance regarding the rationale for this rejection. The Applicants respectfully 
request that this issue be addressed in the Advisory Action. 
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wirh Ru pert ro Claim Claim 5 recites that the token interface comprises "a tokm interface 
sensor configured to receive the signal proceed by a tokm emitter when the tokm ispbysicalfy coupled with the token 
interface"* According to the Office Action, this feature is described as follows. 

When prompted by the iiser-validarion program, the user aligns the IR key device 21 ^vith the IR pan 1* and 
depresses the switch 25 within die allotted time period (e. B . 30 seconds). The tR key device 21 transmits a 
message that includes the key device serial number and the encryption key using the Ultra Protocol as 
established by the Infrared Data Association (IrDA).(coL S, lines 51-57) 

The Applicants respectfully disagreed. The IR embodiment of the Rallis reference (the only 
embodiment could be interpreted to disclose a token emitter) is disclosed as an alternative 
embodiment, not one that is used in conjunction with the embodiment using the USB or PS/2 port. 
Hence, the Rallis reference fails to disclose ox suggest the features recited in claim 5, and claim 5 is 
allowable. 

The Final Office Action did not further address the rejection of claim 5. The Applicants 
respectfully request that this issue be addressed in the Advisory Action, 

Widi Respect m Claims 6 And 7 : Claim 6 recites* that the token emitter emits a second signal 
including information describing the intensity of the signal. The First Office Action acknowledges 
that feature is not explicitly disclosed in the Rallis reference, but relying on die text reproduced 
below, argues "when the user has a sensor that is an IR signal, and then the signal transmits the 
intensity, because the sensor senses when the user is in a certain range". 

When prompted by the user-validauon program, the user aligns the IR key device 21 with die IR port 16 and 
depresses the switch 25 within the allotted time period (eg. 30 seconds). The IR key device 21 transmits a 
message that includes the key device serial number and the encryption key using the Ultra Protocol as 
established by the Infrared Data Association (IrDA). (coL 5, lines 51-57) 

and 

In the "super key" configuration, the IR key device 21 includes both an IR transmitter and JR recerver, but 
does not include a transmit switch. The IR key device 21 remains the powered-down state until it receives an 
IR pulse, (col 6, lines 7-10) 

This, of course, does not disclose a token emitter transmitting a second signa/ having information 
describing the intensity of the (first) signaL 

The Final Office Action argues that Rallis "discloses the intensity of the signal, key device 
sends commands low nibble and high nibble." 
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The Applicants do not understand the relevance of "low nibble" and "high nibble" to claim 
6, and therefore traverse this rejection. 

With Respect n«im 7; Claim 7 recites that the processor controls the intensity of the first 
signal according to the information describing intensity of the fkst signal received from the second 
signal The Final Office Action claims that Rallis inherently discloses this feature, because "Ms 
waits for the command from the processor." 

Waiting for a command does not read on the features of claim 7. Accordingly, the 
Applicants traverse the rejection of claim 7. 

>ffith Respect to CbnrrxB : Claim 8 recites: 

transmitting the user-entered persona/ identifier to the token via a communication path distinct from 

the U SB-compliant interface 

According to the First Office Action, the RaDis reference discloses the step of transmitting 
the user-entered personal identifier to the token via a communication path distinct from the USB- 
compliant interface as follows: 

When prompted by the user-validation program, die user aligns die IR key device 21 with the IR port 1 6 and 
depresses the switch 25 wiihiii die allotted lime period (eg. 30 seconds). The IK- key device 21 transmits a 
message chat includes the key device serial number and the encryption key using the Ultra Protocol a$ 
established by the Infrared Data Association (IrDA).(col. 5, Hues 51-57) 

The Final Office Action offered no farther guidance regarding this rejection. 

Clearly, Rallis does not disclose tcansmitting the user entered PIN to the token. The Rallis 

reference does not disclose nransmitting a PIN to the token at all, and in fact, teaches away from 

doing so. The Applicants therefore traverse this rejection. 

With Resp^ r? riq ^ 9 and 10 : Claims 9 and 10 are allowable for the same reasons as 

Hqtm 8. 

With Respect to Claim 1 1 : Claim 11 retires that the signal is shielded to confine reception of 
die signal to the sensor. This rU\m is allowable fot the same reasons described with respect to claim 
1 above. 
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With Respcrt to Claims 12-14 : Claims 12 and 13 are allowable fox the same reasons as claim 
8. Further, nothing in the Rallis reference discloses determining if a token is accepted by sensing a 
connect signaL 

With Respect to Claim 15 : Claim 15 recites that the step of deterrnining if the token has 
been accepted by the input device comprises the step of receiving a second signal produced by the 
token emitter after the token sensor receives a third signal in the token interface. According to the 
Of&ce Action, these features are disclosed in the Rallis reference as follows: 

The procedure permits entry past a first sccuiicy level only if the key device serial number marches the 
unencrypted numbers in the validation record If the first-level validation is successful, the procedure then uses 
die encryption key to decrypt the hard drive serial number and PIN found in the stored validation record. The 
procedure permits entry past die second security level only if the validation record is properly decrypted, the 
installed hard disk serial number matches the decrypted number, and the manually-entered PIN matches the 
decrypted PIN- A failure at any Step in the user-validaiion procedure will immediately power down the 
computer, thereby rendering it useless to a thief not possessing the required key devicc.(coL 1, line 64, through 
coL2,line 10), 

According to the First and Final Office Action, the "third signal" is the user's 'TIN that is 
incorrect." The Applicants respectfully traverse. The foregoing is completely unrelated to the 
subject of claim 15 (determining if the token has been accepted by the input device). Furdier, the 
user's PIN is not a signal produced by a token emitter or received by a token emitter. 

The Final Office Action provided no further guidance regarding this rejection 

With Respect to Claim 16 : Claim 16 is allowable for the same reasons as claim 7. 

With Respect to Claim 17 : Claim 17 recites the seep of "disabling the transmission of the user- 
entered persona/ identifier until detection of the acceptance of the token to the USB port. " The First Office Action 
indicates that these features are disclosed in Rallis as follows: 

For maximum security protection, the key device 20 is connected only during the user-validation, procedure and 
is carried and stored separately from the notebook computer 10. (col 2, line 67 through coL 3, lines 3) 

A flow diagram of the user-validation procedure is shown in FIG- 3. In Step 1, the user-validation program 
prompts the user to attach the key device 20 to the notebook computer 10. The program attempts to 
communicate with the key device 20 for a fixed delay period. If a key device 20 is not detected within this 
period, then the program proceeds to Step 11 where the computer is automatically powered down. (coL 3 and 
18^24) 

The Applicants do not understand where the foregoing passages disclose disabling the 
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transmission of a user-entered personal identifier until detection of the acceptanc of the token to 
the USB port. Rallis, in feet, does not teach transmitting a PIN anywhere, and certainly does not 
reach disabling transmission of a user-entered PIN until a token is accepted into a USB port 
The final Office Action responds: 

"Rallis does disclose disabling the transmission of the user-entered Pin until detection of the 
token to the port, because if the key device is not detected the computer is powered down, 
and thus the messages of the pin transmitted cannot be transmitted" 

The Applicants do not understand the meaning of this statement, and respectfully traverse 
the rejection of claim 17. 

VII. CONCLUSION 

In view of the above, it is submitted that this application is now in good order for allowance 
and such allowance is respectfully solicited. Should the Examiner believe minor matters still remain 
that can be resolved in a telephone interview, the Examiner is urged to call Applicants' undersigned 



attorney. 



Respectfully submitted, 



GATES & COOPER LLP 



Attorneys for Applicants) 



Howard Hughes Center 
6701 Center Drive West, Suite 1050 
Los Angeles, California 90045 
(310) 641-8797 



•Dare: May 24. 2004 




Name: Victor G. Cooper 
Reg. No.: 39,641 
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